Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
File: yc040dHEojBTzZlxYzGNZJp7Klc.cer (raw, json)
Hash identifier: 3goY+tIUqiIWQ8q0Yg8rap1M/fUIR261i3SgVQR7YvE=
Subject key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727497AB9A60865D25EC049B54C5D86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206063
IP: 185.39.252.0/22
IP: 2a04:7ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:49:7a:b9:a6:08:65:d2:5e:c0:49:b5:4c:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:79:71:d4:e6:1d:96:85:fa:41:b6:a5:b9:
40:73:22:10:45:60:5e:9b:1f:ca:ef:22:2d:b3:ec:
00:2a:91:78:05:d3:27:ff:33:63:51:15:f4:57:43:
77:d5:d8:6e:c4:f8:78:90:e6:7f:c4:e4:1e:cd:f2:
83:9b:9b:a5:13:cc:59:85:90:b1:8b:01:57:84:fb:
3f:03:08:71:9f:c1:4a:13:12:98:fb:a1:61:c0:b9:
a2:6c:8c:60:ec:82:b5:25:d2:5f:16:f3:56:71:f5:
25:81:e0:ff:83:65:71:88:3a:7d:94:21:1c:0d:37:
82:5a:1b:88:36:b9:79:2c:87:0f:c6:ce:84:73:c8:
63:ea:81:c5:7a:a5:26:86:d7:86:bf:e0:c1:00:25:
d0:34:48:cb:d3:47:7a:83:40:05:68:3f:1f:b2:ac:
13:c9:ed:b5:44:57:78:68:de:09:54:bb:d4:86:ea:
a1:dc:07:e7:28:da:e3:67:d4:b8:44:78:c2:0f:6b:
62:8c:66:b8:88:3e:a2:06:d9:9b:47:d2:d3:c3:90:
4e:4d:36:ac:27:99:49:82:b8:cf:98:cb:74:0e:dc:
f6:3b:3d:4a:6e:b4:cf:0e:e8:a9:1a:b9:11:48:a2:
cf:c1:a1:b1:74:ac:10:53:d9:51:20:50:4c:74:9a:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.252.0/22
IPv6:
2a04:7ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206063
Signature Algorithm: sha256WithRSAEncryption
6e:75:68:58:47:19:04:51:cf:99:ca:5c:60:28:e5:14:b6:c6:
9a:54:49:d9:eb:e7:f2:a4:39:6d:50:1e:b0:2c:dc:2c:d0:99:
3f:33:4b:c6:ef:a2:c0:eb:ba:96:3c:bb:aa:98:37:c6:3e:ce:
a4:1d:2e:cf:a2:d7:2d:8e:09:2a:8c:f5:84:09:d2:12:1e:1b:
99:57:ee:b8:7a:3a:cd:c8:b4:73:29:11:94:4d:d2:e2:f2:4b:
cd:20:8b:12:16:c1:8f:2d:94:4d:33:89:46:33:cb:1a:41:4c:
52:44:25:71:1e:eb:25:4c:db:1f:54:67:6f:eb:55:f5:2f:f1:
99:e4:1b:71:5e:e1:55:7b:3d:27:c5:3e:fd:68:bd:8f:ef:bb:
d4:28:9c:68:98:77:42:37:af:4a:c2:a3:46:56:83:87:31:f2:
68:61:7a:31:c4:95:7e:a7:62:e7:be:ec:d6:ee:85:6f:87:97:
f1:48:18:ac:ee:be:f8:3a:d7:d8:ff:a1:f6:8f:42:cc:82:c1:
b0:ed:6f:54:84:15:1e:f2:f4:12:1b:11:1b:39:ef:92:9d:c7:
8c:1d:c9:ef:d8:a3:34:4a:fa:c8:1f:52:58:cb:1b:05:4d:38:
b3:23:cb:e9:21:de:85:c5:05:92:c3:c0:65:78:31:6d:62:57:
1d:5b:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:42:58 2024 by rpki-client on console-ams.rpki-client.org